   (let [egress (check-default-egress opts)]
     (when-not (empty? egress)
       (network-action sg-id egress :AuthorizeSecurityGroupEgress)
-      (network-action sg-id {:IpRanges "0.0.0.0/0" :IpProtocol "-1"} :RevokeSecurityGroupEgress))))
+      (network-action sg-id (list {:IpRanges "0.0.0.0/0" :IpProtocol "-1"}) :RevokeSecurityGroupEgress))))
 
 (defn- network-config
   [params]


(defn- build-network-params
  [index opts]
  (into {} (map #(network-query-params index %1) opts)))

(defn- network-action
  [sg-id opts action]

  (let [opts (-> opts
                 (assoc :Ingress (flatten (:Ingress opts)))
                 (assoc :Egress (flatten (:Egress opts))))
        response (process :DescribeSecurityGroups (filter-params opts))]
    (if-let [sg-id (xml1-> response :securityGroupInfo :item :groupId text) ]
      (compare-sg sg-id response opts)
